Vulnerability in Maildrop

CVE-2010-0301

main.C in maildrop 2.3.0 and earlier, when run by root with the -d option, uses the gid of root for execution of the .mailfilter file in a user's home directory, which allows local users to gain privileges via a crafted file.

EPSS: 0.004 (34.7th percentile) — read the EPSS interpretation.

Affected products

  • Maildrop — versions 1.6.2, 0.70, 0.64
  • N/a — versions n/a

Weakness classification (CWE)

References